Detections
Analytics
FreeBSD : ImageMagick7 -- multiple vulnerabilities (e1f67063-aab4-11e6-b2d3-60a44ce6887b)
high Nessus Plugin ID 95514
Language:
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
Multiple sources report :CVE-2016-9298: heap overflow in WaveletDenoiseImage(), fixed in ImageMagick7-7.0.3.6, discovered 2016-10-31
CVE-2016-8866: memory allocation failure in AcquireMagickMemory (incomplete previous fix for CVE-2016-8862), not fixed yet with the release of this announcement, re-discovered 2016-10-13.
CVE-2016-8862: memory allocation failure in AcquireMagickMemory, initially partially fixed in ImageMagick7-7.0.3.3, discovered 2016-09-14.
Solution
Update the affected packages.See Also
https://github.com/ImageMagick/ImageMagick/issues/296
http://www.nessus.org/u?7bfc22fd
http://www.nessus.org/u?c76db473
Plugin Details
Severity: High
ID: 95514
File Name: freebsd_pkg_e1f67063aab411e6b2d360a44ce6887b.nasl
Version: 3.7
Type: local
Family: FreeBSD Local Security Checks
Published: 12/5/2016
Updated: 1/4/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: High
Base Score: 7.8
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:imagemagick7, p-cpe:/a:freebsd:freebsd:imagemagick7-nox11, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 12/4/2016
Vulnerability Publication Date: 9/14/2016